Home > List all groups > List all tools > List all groups using tool Troll Stealer

Threat Group Cards: A Threat Actor Encyclopedia

Names	Troll Stealer TrollAgent
Category	Malware
Type	Info stealer
Description	(S2W Talon) S2W Talon has named the malware “Troll Stealer” because it contains the pathname “D:/~/repo/golang/src/root.go/s/troll/agent” within the malware. Troll Stealer can steal information from the infected system like SSH, FileZilla, C drive files/directories, browser, system information, screen captures and send it to the C&C server.
Information	<https://medium.com/s2wblog/kimsuky-disguised-as-a-korean-company-signed-with-a-valid-certificate-to-distribute-troll-stealer-cfa5d54314e2>

Last change to this tool card: 07 March 2024

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups